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Space DlvlBlon 

An assessment of the. Apollo 13 mission resulted In establishing 
new and revised requirements for the design of the oxygen tanks and 
the associated spacecraft system. 

Areas to be discussed include new system requirements, system 
changes to Apollo l4, revised operational requirements, instrumenta- 
tion, operational redlines, component Isolation modes, and return 
enhancement capabilities. In order to show the relationship of the 
cryogenic system tp the spacecraft, a short description of the 
system may be useful. 

General System Description and Requirements (Basic Apollo) 

The basic Apollo cryogenic system consisted of two each oxygen 
tanks and hydrogen tanks. The system includes related controls, 
check valves, filters and shutoff valves as shown in Figure 1. 
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Oxygen Is provided for pressurization of the command module and 
for crew metabolic consumption. Oxygen and hydrogen In an 8:1 ratio 
Is also provided as reactants to the fuel cells for the generation 
of spacecraft electrical power. Useful stored consumables eu'e 320 
pounds of oxygen per tank, and 28 pounds of hydrogen per tank. The 
basic design concept for the cryogenic system allows for an emergency 
return with the loss of either one hydrogen tank, or one oxygen tank, 
or both. The hydrogen and oxygen systems for the basic Apollo are 
stored In Sector IV of the service module as shown on Figure 2 . 



Figure 2 


Detailed System Description 

Following an oxygen fluid flow path from Tank Number 1 , fliild 
from the tank passes through the system valve mod\ile which contains 
a pressure relief valve, a pressure transducer, a pressure control 
switch, and a check valve. The pressure control switch operates 
between a range of 865 to 935 psig. As the pressure in the tank 
decays due to fluid expulsion, the pressure control switch activates 
at the low setting, energizing the motor driven electrical transfer 
switch, which in turn provides electrical energy to the heaters 
located inside the oxygen tank. The process reverses as the pressure 
control switch reaches the upper limit setting. The pressure trans- 
ducer provides pressure readout to the crew and to flight control. 

The pressure transducer readout is accurate within plus or minus 2.5 
percent of full scale within a range of 50 to 1,050 pslg. The system 
relief valve operates within a pressure band of 973 pslg cracking 
pressure with full flow in excess of 100 lbs /hr at 1,010 pslg. 
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Oxygen passing through the system valve module Is transported to the 
fuel cells through check valves^ solenoid shutoff valves, and the 
fuel cell flow meters. Fluid Is also transported to the Environmental 
Control System (ECS) thro\igh flow restrictors, check valves and 
Isolation valves. Components within the system are protected from 
contamination by the use of Inline filters ranging from 12 m . absolute 
to 175 absolute. 

Pressure and queuitlty readouts for each tank are displayed on 
the control and display panels In the command module, and sure also 
provided through telemetry to flight operations. The cryogenic bulk 
fluid temperatures are also provided to flight operations. The two 
oxygen systems are completely Independent In operation, the systems 
being Interconnected downstream of the fuel cell system check valves 
emd the ECS check valves. The primary purpose of the check valves 
Is to prevent reverse flow from Tank Niunber 1 to Tank Number 2 and 
the reverse. 

Controls are provided which allow the crew to select ON-OFF or 
AUTO selection for the O 2 &ad H 2 tank heaters and fans. Circuit 
breakers and/or fuses are provided for circuit protection for all 
electrical components and systems. Installation of the cryogenic 
system Is of a modular concept; all components. Including the tanks, 
are mounted on the equlpoient shelves which In turn are Installed In 
the service module. Interconnecting lines sire brazed, except for 
the connections to the fuel cells which sure mecheuilcal Joints. 

Apollo 13 Mission Assessment 

As a result of the Apollo 13 Incident, NR Joined with NASA and 
other contractors In an Immediate Investigation, Including a 
reassessment of the Command and Service Module (CSM) subsystems, 
and support equipment. Results of the Joint reassessment suggested 
significant changes In the following two basic areas. 

First, the knowledge that emerged from the Investigation 
Indicated that new requirements needed to be established for the 
spacecraft cryogenic system, as well as for the oxygen tank. These 
requirements resulted In a series of design changes known as the 
cryogenic system modification. 

Second, the experience gained from the safe return of Apollo 13 
Indicated that, during certain abort-mlsslon conditions, additional 
power, oxygen, and potable water woxild enhance the probability of a 
successful return to earth. This series of changes has come to be 
known as the return enhancement modification. 
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The new requirements established revised ground rules for the 
design of the cryogenic oxygen system as follows: 

a) Eliminate or minimize the use of organic materials within 
tanks and components. 

b) Eliminate or reduce blind Installations. 

c) Eliminate dynamic components exposed to oxygen. 

d) Revise Instrumentation and caution and warning system to 
provide for positive Indication of system operations^, 
parameters . 

Chsuiges to the Apollo cryogenic system considered previous 
flight operational data, which resulted In maintaining changes to 
a minimum to avoid losing valuable mission experience. The above 
requirements resxxlted In the following chsuiges to the spacecraft 
smd components. 

1) Redesign the oxygen tank. 

2) Add oxygen tsuik heater Instrumentation. 

3) Provide for one, two or three oxygen tank heater operation. 

4) Instsill oxygen tank feed line filters. 

Replace fuel cell reactsmt shutoff valve. 

6) Revise talk -back logic In F/C reactant shutoff valves. 

7) Add reactant valve position to caution and warning system. 

8) Revise hydrogen tsuik pressure caution suid wsimlng limits. 

9) Install third oxygen tank In Apollo l4. 

10) Add third oxygen tank Isolation valve. 

11) Add third oxygen tank check valve. 

12) Add oxygen tcmk 2 and 3 msuilfold pressure trsmsducer. 

13 ) Install auxlllsuy battery. 

Oxygen Tsuak Redesign and Related CSM Changes 

The redesign of the oxygen tank resulted In some additional 
changes to the spacecraft associated with the electrical system, 
controls and displays, and Instrxunentatlon. The design of the 
modified tank Incorporates three heater elements, versus two on the 
basic Apollo tank, plus the addition of a heater temperature sensor. 
The addition of the third heater element provides for additional 
redundancy, plus the capability of selecting either one, two or 
three heater element operation. The selection of single or mviltlple 
energy Input sources becomes Important for future missions where 
higher flow rates, at various fluid density levels are required. 
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Heater Temperature Sensor 


Extensive testing and analysis shoved that the b ulk fluid 
temperature sensor installed in the basic Apollo oxygen tank did 
not reflect the highest temperatures of the fluid or materials within 
the tank. This was amplified by the removal of the destratification 
fans, which resulted in a higher degree of stratification of the 
fluid. 

To provide more realistic temperature data, with reference to 
the highest temperatures within the tank, a heater temperature 
sensor was added* Comprehensive analysis and test programs have 
established that the location of the heater temperature sensor is 
within 30 F relative to the hottest spot on the heater assembly. 

The addition of the heater temperature sensor required the addition 
of temperature signal conditioners located on the oxygen shelf 
assembly as shown on Figure 3* 



Figure 3 


The temperature sensor output range is from -320 F to +600 F. 
Heater temperature data Is available to flight operations for 
monitoring during the mission. Spacecraft wiring and switch panel 
modifications have been made to allow for crew selection of varied 
heater configuration. The establishment of a 350 F heater temperature 
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redllne was the result of extensive testing and analysis. The analysis 
Indicated that the heater temperature should not approach the 3^0 F 
redllne based on cvirrently planned oxygen flow rates for the "H", 

"J", and Skylah missions. The material test programs have shown 
that there Is no degradation or hazardous, operating condition with 
heater temperatures up to 3^0 F. The 3^0 F redllne considers the 
30 temperature delta between location of the sensor and the hottest 
spot on the heater. Instrumentation error, material limits plus a 
safety factor. 

System Filters 

Redesign of the oxygen tank also necessitated the Installation 
of Inline filters In the oxygen feed lines. The addition of a 
heater temperature sensor In the oxygen tank, coupled with relocation 
of the bulk fluid temperature sensor, resulted In a space limitation 
within the oxygen teuik neck adapter area. This necessitated removing 
the filters from within the tanks and Installing them In the tank 
feed line. 

Replacement of Fuel Cell Reactant Shutoff Valves 

The reactant shutoff valve assembly Is composed of three 
solenoid valves and two check vsilves as shown on Figure 4. 
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The oxygen enters from each oxygen tank through the check 
valves Into a plenum. The plenum allovs for oxygen to flow from 
either tank to the fuel cells. Three latching solenoid shutoff 
valves are used to close off reactant flow to the fuel cells. A 
talk -hack Is displayed to the crev to Indicate the open or closed 
valve position. 

The replacement of the oxygen reactant shutoff valve was the 
result of the flammahlllty analysis conducted on all components In 
the oxygen loop. The O 2 reactant shutoff valve was Identified as 
having teflon coated electrical wiring, teflon material, end open 
terminals exposed to high pressure oxygen. Rework of the valve to 
provide an oxygen harrier was considered too extensive, requiring a 
complete redesign of the vailve; therefore, the valve was modified hy 
removing the solenoid shutoff valves from the housing. This main- 
tained the manifold for fluid distribution to the fuel cells and 
the check valves. The replacement valve as shown on figure 3 vas 
Installed between the manifold and the fuel cell flow meters. 
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This valve was developed and Is currently used on the Apollo 
reaction control system. All electrical components are shielded 
from high pressure oxygen. The oipy change to the valve vas to 
replace a body seal to eliminate leakage at cryogenic temperatures. 

The valve was successfully subjected to cm extensive test program, 
which Included cryogenic operation, life cycling, thermal shock and 
magnetic latch holding capability. This valve was flown on Apollo lU. 
The Installation of the valve Is shown In figure 3 . 

Reactant Valve Talk-Back Logic 


The talk-back logic on bsislc Apollo was such that both the H2 
and O2 reactant shut-off valves were required to be closed to provide 
talk-back display. This was to ensure that for ground operation and 
checkout both valves were either closed or open. With the 02aod H2 
system pressurized, closure of either the O2 or H2 valve places a 
high, damaging, pressure differential across the fuel cell. The 
Apollo 13 smsessment Indicated the requirement to provide Inflight 
Information of any reactant valve closure. This change was accom- 
plished by wiring the H2 and O2 reactant switches In parallel. The 
talk-back logic was also added to the caution and warning system for 
early Indication of valve closures. (Figure 6) 
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Hydrogen Tank Pregsvure Caution and Warning Limits 

The lov pressure caution and warning signal for the hydrogen 
tanks on basic Apollo was set at approximately 1.0 psl below the 
lower trip point pressure on the hydrogen tank pressure control 
switch. Due to a pressure Imbalance between tanks, or a shift In 
pressure control switch setting, the alarm can be triggered when. 

In fact, system operation Is normal. To delete the possibility of 
nuisance alarms, and the potential screening effect of the C&W 
system as related to the H 2 system pressure switch setting, the 
system was revised to lower the CAW low pressure actuation point 
to effectively reduce the chance of pressure switch and CAW Inter- 
ference. 

Installation of Third Oxygen Tank In Apollo l4 

. The decision to Install the oxygen tank In Apollo l4 was based 
on three factors. 

First, to provide added confidence In mission success with 
redesigned tanks. 

Second, to provide a return enhancement capability In the 
event anomalies would prevent making oxygen available from tanks 
1 and 2. 

Third, system performance In the low density regime, without 
destratlflcatlon fans to provide forced convection, was not understood. 

The "J" configuration Apollo vehicles are designed to provide 
for more extensive lunar exploration, which Includes the Scientific 
Instrumentation Module. The extended operation required additional 
reactants for the fuel cells, plus oxygen for the command module. , 

As a result, the "J" mission vehicles have been modified to accept 
one each additional hydrogen and oxygen tank and related controls 
as shown on figure 7* ‘ 
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Figure 7 

Because of additional crew activities, including external vehicle 
activity (EVA), operation of oxygen tanks In lover fluid density 
ranges Is anticipated. In order to provide advance Information on 
system response at low fluid density operation; and to provide 
added confidence In mission success, a decision was made In July 
1970, to Install a third oxygen tank on the Apollo l4 spacecraft. 

The third oxygen tank was Installed as shovn on figure 8 and Is 
plumbed In parallel vlth oxygen tank number 2. A pressure switch, 
relief valve, and press\ire transducer i>ackage Is provided which Is 
Identical, to the basic system components. 
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Isolation Valve 


As part of the return enhancement capahlllty, an Isolation valve 
was Installed which provides a means to Isolate tank number 3 from 
the rest of the system, providing oxygen only to the command module. 
The Isolation valve Is Identical to the new fuel cell reactant shut- 
off valves and carries the same part number. The Isolation valve Is 
wired to the battery bus to assure operation In the event of the loss 
of primary spacecraft electrical power. 

Tank N\unber 3 Check Valve 

The Installation of the tank number 3 check valves Is Identical 
to tanks number 1 and 2 and serves the same purpose, l.e., preventing 
reverse flow between tanks during nonoal system operation and In the 
event of the loss of a system. 
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Return Ephancement Provisions 

In addition to the third oxygen tank Installed in Apollo l4, 
provisions were made to Install a battery in the service module to 
provide emergency return electrical power. in the event of totsd loss 
of the spacecraft primary electrical power system. The battery is 
rated at 400 amp hours and is identical to the LEM descent battery. 
The emergency return power profile, assuming total loss of the 
Apollo primary electrical power system, is such, that the spacecraft 
capability of a safe return from worst case condition is enhanced. 

Testing 

The redesigned components and the system were subjected to an 
extensive test program which considered all phases of environmental 
and operation conditions, including off-limits testing. The three 
tank system was subjected to two mission life cycle tests at the 
Beech Aircraft test facility in Boulder, Colorado. The system was 
also operated in parallel with the Apollo l4 mission, simulating 
actual mission oxygen flows, at established density ranges. The 
successful completion of the test program provided added confidence 
in the redesign of the components and the system. 

The Installation of the third oxygen tank in Apollo l4 allowed 
for performing a specific series of tests at fluid densities below 
20 $ during the mission. Bata from the test showed good temperature 
correlation with the zero "G" heat transfer models. The test 
demonstrated that with two heater element operation, flows up to 
7.0 Ib/hr can be provided while malntSLinlng heater temperat\ires 
below 350 F. 

The Apollo l4 flight test program also demonstrated that within 
the proposed flow regime for the Apollo 13 mission, pressurization of 
the system can be maintained without the use of destratification 
fans or external pvimplng loops to increase convective heat transfer. 
The test, and total system operation, verified that pressure drops 
associated with sudden mixing of stratified fluids is negligible. 
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Conclusion 


The nev requlremen'ts, 'test programs and attendent chauoges as 
Implemented on the follow-on spacecraft have: 

1) Extended the capability of the cryogenic system by providing 
a high degree of confidence and great flexibility in system 
operation . 

2 ) Provided an extremely high confidence in a successful return 
to earth from worst case abort conditions . 

3) Supplied data from the Apollo l4- mission which is directly 
applicable to future, more advanced Apollo missions; 
established analyses/flight correlation techniques appli- 
cable to future programs and systems. 

if) Provided increased knowledge regarding ignition characteris- 
tics and bum rates of materials exposed to high pressure 
oxygen . 

5) Established new design requirements for cryogenic systems 
relative to future programs and systems. 
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